counterreaction.net - URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned counterreaction.net and returned a unknown verdict (score 0). The page resolved to 162.241.252.59 on Unified Layer in US. The domain was registered 4838 days ago through Bluehost Inc.. 1 domain and 1 IP were contacted. 6 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
http://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/16143b68bbfdfe---45603475119.pdf - Domain: counterreaction.net · IP: 162.241.252.59 · AS46606 · US
- Server: Apache
- Page title: 404 Not Found
- HTTP status: 404 · text/html; charset=iso-8859-1
- Registrar: Bluehost Inc. · domain age 4838 days · created 2013-05-17
- Scan tier: fast · observed 2026-08-15 17:00:02 UTC
Redirect chain
http://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/16143b68bbfdfe---45603475119.pdfhttps://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/16143b68bbfdfe---45603475119.pdf
Malware communicating with this URL (6)
These samples were observed contacting or being served from counterreaction.net. Each links to its full analysis.
- Phishing - referenced ·
1bdc574cd9bbd864d0353453c51a2a5d· first seen 2026-08-15 - Phishing - referenced ·
f3cdcb12217431d099ea8d9934639621· first seen 2026-08-15 - Phishing - referenced ·
6f085ef1b8a83ea0edd80bb926ef566a· first seen 2026-08-13 - Phishing - referenced ·
170d9b28f1974855ffb1fc01e76cf77e· first seen 2026-08-13 - Phishing - referenced ·
3704f6ff9e2472a28baa8314f3573e56· first seen 2026-08-12 - Phishing - referenced ·
2368969d7190978d82a7eae692fd58c0· first seen 2026-08-12
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Detected technologies
- Apache
Contacted infrastructure
- 162.241.252.59 - AS46606 Unified Layer (United States)
Observed indicators
- counterreaction.net
- 162.241.252.59
- https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/16143b68bbfdfe---45603475119.pdf
Other scans of counterreaction.net (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown ·
https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/1614669f84 - 20 Aug 2026 - unknown ·
https://counterreaction.net/wp-content/plugins/formcraft/file-upload/server/content/files/160bbda9b6
Questions about counterreaction.net
- Is counterreaction.net safe?
- The scan of counterreaction.net on 15 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with counterreaction.net?
- 6 analysed samples communicate with this URL, including Phishing.
- How was counterreaction.net checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of counterreaction.net
Scanned on MalwareAnalyzer by Cyble · Open interactive scan